It made multiple requests with the same X-Requested-With header.

This IP was caught conducting cookie-poisoning attack.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

The IP performed forceful browsing, to access and exploit unprotected files and directories.

This malicious IP was reported for attempting to perform a FTP Phishing attack, creating a fake FTP login page to deceive users into providing their credentials.

Rapid sequence of login attempts.

This IP has been detected spreading notorious credit card skimmers.

The IP was seen trying to exploit known vulnerabilities in the Asterisk server, a common tactic for gaining unauthorized access or control.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

This IP belongs to New York Life Insurance.

The malicious IP was found to be running an Internet Relay Chat (IRC) bot, potentially spreading malware or launching Distributed Denial-of-Service (DDoS) attacks.

Unusual patterns in referrer URLs.

It made multiple requests with the same X-Csrf-Token header.

The IP attempted to perform a credential stuffing attack on the POP3 server.

It attempted to exploit known vulnerabilities in the POP3 protocol.

Our system blocked an attempted Code Injection attack from this IP.

Side Channel Attacks: Repeated requests aimed at inferring sensitive information through observation of web responses.

The IP attempted to download sensitive files from the Apache server.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

It was detected trying to perform cross-site scripting to bypass the same origin policy on Apache.

This IP belongs to KT Corporation.

The IP was seen trying to perform a SIP Registration Hijacking attack, attempting to impersonate a legitimate user to receive their calls.

This IP had been flagged for attempting to manipulate server behaviour by injecting shellcodes.

This IP belongs to Costco Wholesale.

Usage of Obscure HTTP Verbs: Seeing non-standard HTTP methods like DEBUG, PUT, or CONNECT could imply a web-based attack.